CVE-2026-56650
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.
Risk Assessment
Risk includes privilege escalation, potentially leading to unauthorized file and system access.
Recommendation
Apply security updates from Microsoft and restrict access to NFS services.
Other vulnerabilities in Windows Network File System
See all- CVE-2026-68819Medium
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
- CVE-2026-56649Medium
A race condition exists in Windows Network File System when using a shared resource concurrently. An unauthorized attacker can exploit this to execute code remotely over the network.
- CVE-2026-56648High
A time-of-check time-of-use (TOCTOU) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network.
- CVE-2026-56194High
Heap-based buffer overflow vulnerability in Windows Network File System allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.